CVE-2019-13566

CVE-2019-13566 affects ROS communications-related packages (ros_comm / ros-melodic-ros-comm) up to version 1.14.3. The issue is a buffer overflow triggered by an IP address with a long hostname, leading to denial of service and potentially arbitrary code execution. No remediation details are prov...

CVE-2021-37146

CVE-2021-37146 involves an infinite loop in the Open Robotics ros_comm XMLRPC server, affecting ROS Melodic <=1.4.11 and ROS Noetic

CVE-2019-13445

The CVE-2019-13445 issue affects ROS communications-related packages (ros_comm / ros-melodic-ros-comm) up to version 1.14.3. The root cause is in parseOptions() inside tools/rosbag/src/record.cpp, where an integer overflow can occur when a crafted split option is entered on the command line. The ...

CVE-2019-13465

CVE-2019-13465 affects ROS communications-related packages (ros_comm/ros-melodic-ros-comm) through 1.14.3. The root cause is that ROS_ASSERT_MSG only works when ROS_ASSERT_ENABLED is defined; when not defined, the iterator loop in remove() (clients/roscpp/src/libros/spinner.cpp) can run out of th...

CVE-2020-16124

CVE-2020-16124: Integer overflow in the XML RPC library of OpenRobotics ros_comm communications packages (Noetic and earlier) allows unauthenticated network traffic to cause unexpected behavior. Root cause is an overflow/wraparound in the XML RPC code path. A fix has been merged in ros_comm/pull/...